Fedora Update for firefox FEDORA-2020-732a5913b6

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for firefox FEDORA-2019-7f7bace5b4

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for chromium FEDORA-2019-688d52f9ff

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-17022

CVE-2019-17022 affects Thunderbird (and Firefox ESR/Firefox) where pasting a tag bypasses CSS sanitization by not escaping characters, potentially enabling XSS when innerHTML is later copied back. Connected advisories indicate vulnerable versions include Thunderbird up to 68.4.x and Firefox ESR...

Cisco Emergency Responder CVE-2019-16025 HTML Injection Vulnerability

Description Cisco Emergency Responder is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to...

Mozilla Firefox Memory Corruption Vulnerability (CNVD-2020-02973)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox version 71. An attacker can exploit the vulnerability to corrupt memory and potentially execute arbitrary code...

exploitdb-bin-sploits

This is an official repository of The Exploit Database, a project sponsored by Offensive Security. The repository contains a collection of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers. It is intended to serve as the...

WebKit Component Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2020-00541)

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. webKit is one of the web browser WebKit is a Web browser engine component. A memory corruption...

WebKit component buffer overflow vulnerability in multiple Apple products (CNVD-2020-00209)

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. webKit is one of the web browser WebKit is a Web browser engine component. A buffer overflow...

Multiple Dell EMC Products CVE-2019-18588 Cross Site Scripting Vulnerability

Description Multiple Dell EMC products are prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...

Google Chrome Resource Management Error Vulnerability (CNVD-2019-46750)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a resource management error vulnerability. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service in the context of the current browser...

Cross site scripting

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a reflected cross-site scripting vulnerability in the My Access Live module MAL. An authenticated malicious local user could potentially exploit this vulnerability by sending crafted...

CVE-2019-18571

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a reflected cross-site scripting vulnerability in the My Access Live module MAL. An authenticated malicious local user could potentially exploit this vulnerability by sending crafted...

[SECURITY] Fedora 31 Update: chromium-79.0.3945.79-1.fc31

Chromium is an open-source web browser, powered by WebKit Blink...

PT-2019-15524

Name of the Vulnerable Software and Affected Versions RSA Identity Governance and Lifecycle versions prior to 7.1.1 P03 RSA Via Lifecycle and Governance versions prior to 7.1.1 P03 Description The issue concerns a reflected cross-site scripting vulnerability in the My Access Live module. An...

TYPO3 Form Framework TYPO3-CORE-SA-2019-021 Cross Site Scripting Vulnerability

Description TYPO3 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker...

Debian DLA-2029-1 : firefox-esr security update

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. For Debian 8 'Jessie', these problems have been fixed in version 68.3.0esr-1deb8u1. We recommend that you upgrade your firefox-esr packages. NOTE: Tenabl...

Symantec Messaging Gateway CVE-2019-18378 Cross Site Scripting Vulnerability

Description Symantec Messaging Gateway is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...

Multiple Siemens EN100 Ethernet Modules SSA-418979 Multiple Security Vulnerabilities

Description Multiple Siemens EN100 Ethernet Modules are prone to multiple security vulnerabilities. An attacker may leverage these issues to execute arbitrary code, using directory-traversal sequences '../' to retrieve sensitive information and execute arbitrary script code in the browser of an...

Microsoft SQL Server Reporting Services CVE-2019-1332 Cross Site Scripting Vulnerability

Description Microsoft SQL Server Reporting Services SSRS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...